Vulnerability · Published Dec 22, 2025 · Assigned by VulnCheck
CVE-2023-53975Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page
High 7.5
In plain English
A high-severity SQL injection in Atom CMS from thedigicraft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 59.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| thedigicraft | Atom CMS | 2.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
References
- ExploitDB-51086 exploit
- Atom CMS GitHub Repository product
- VulnCheck Advisory: Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page third-party-advisory